General

  • Target

    101356-355-0x0000000000530000-0x0000000000558000-memory.dmp

  • Size

    160KB

  • MD5

    7491fb5e2c5d14df8466149683534edf

  • SHA1

    95b4935dcf0ab5e1764fc2144284aff84c93f58d

  • SHA256

    bd498a83fbd4cd669b05310d2c594f6afd187b8591acdfae5839fbf543781680

  • SHA512

    a4972001feab0c38e906bd71bbba24587b258e4775dd763fba699d412eda0e54fb156e6df0f662f7d94b851d83d9857ecb06f1e5fb8e660ffce37df6f964f5e9

  • SSDEEP

    3072:8YO/ZMTFXHGJtjQ0lYpxN6VBDFvydPShhSSB6W:8YMZMBXHGJmWYpxNkQ9Sho

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @me_golds)

C2

77.73.134.27:7161

Attributes
  • auth_value

    e136da06c7c0400f4091dab1787720ea

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 101356-355-0x0000000000530000-0x0000000000558000-memory.dmp
    .exe windows x86


    Headers

    Sections